| CVE-2026-62918 | 7.5 | — | — | — | microsoft / teams | Improper verification of cryptographic signature in Microsoft Teams allows an unauthorized attacker to perform spo | 78d ago |
| CVE-2026-66315 | 7.5 | — | — | — | microsoft / edge chromium | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. | 81d ago |
| CVE-2026-59117 | 7.5 | — | — | — | microsoft / terminal | Integer overflow or wraparound in Windows Terminal allows an unauthorized attacker to execute code over a network. | 99d ago |
| CVE-2026-50651 | 7.5 | — | — | — | microsoft / .net | Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over | 101d ago |
| CVE-2026-50648 | 7.5 | — | — | — | microsoft / .net framework | Allocation of resources without limits or throttling in .NET Framework allows an unauthorized attacker to deny ser | 101d ago |
| CVE-2026-50527 | 7.5 | — | — | — | microsoft / .net framework | Stack-based buffer overflow in .NET Framework allows an unauthorized attacker to deny service over a network. | 101d ago |
| CVE-2026-50525 | 7.5 | — | — | — | microsoft / .net framework | Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over | 101d ago |
| CVE-2026-50524 | 7.5 | — | — | — | microsoft / .net | Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to deny service o | 101d ago |
| CVE-2026-47302 | 7.5 | — | — | — | microsoft / .net framework | Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over | 101d ago |
| CVE-2026-58627 | 7.5 | — | — | — | microsoft / windows 10 1607 | Uncontrolled resource consumption in Windows DHCP Server allows an unauthorized attacker to deny service over a ne | 101d ago |
| CVE-2026-58531 | 7.5 | — | — | — | microsoft / windows 10 1607 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB allows | 101d ago |
| CVE-2026-57108 | 7.5 | — | — | — | microsoft / .net | Access of resource using incompatible type ('type confusion') in .NET Core allows an unauthorized attacker to deny | 101d ago |
| CVE-2026-57089 | 7.5 | — | — | — | microsoft / windows 10 1607 | Use after free in Windows SMB Server Network Transport Driver (srvnet.sys) allows an unauthorized attacker to exec | 101d ago |
| CVE-2026-56648 | 7.5 | — | — | — | microsoft / windows 10 1607 | Time-of-check time-of-use (toctou) race condition in Windows Network File System allows an authorized attacker to | 101d ago |
| CVE-2026-50685 | 7.5 | — | — | — | microsoft / windows 10 1607 | Double free in Windows DHCP Server allows an authorized attacker to execute code over a network. | 101d ago |
| CVE-2026-50647 | 7.5 | — | — | — | microsoft / windows 10 1607 | Loop with unreachable exit condition ('infinite loop') in Active Directory Federation Services (AD FS) allows an u | 101d ago |
| CVE-2026-50505 | 7.5 | — | — | — | microsoft / windows 10 1607 | Use after free in Windows Message Queuing allows an authorized attacker to execute code over a network. | 101d ago |
| CVE-2026-50500 | 7.5 | — | — | — | microsoft / windows 10 1607 | Use after free in Windows Netlogon allows an authorized attacker to elevate privileges over a network. | 101d ago |
| CVE-2026-50496 | 7.5 | — | — | — | microsoft / windows 10 1607 | Out-of-bounds read in Windows Network Policy Server SNMP allows an unauthorized attacker to disclose information o | 101d ago |
| CVE-2026-50470 | 7.5 | — | — | — | microsoft / windows 10 1607 | Out-of-bounds read in Windows Network Policy Server SNMP allows an unauthorized attacker to disclose information o | 101d ago |
| CVE-2026-50463 | 7.5 | — | — | — | microsoft / windows 10 1809 | Out-of-bounds read in Windows Kernel allows an unauthorized attacker to disclose information over a network. | 101d ago |
| CVE-2026-50424 | 7.5 | — | — | — | microsoft / windows 11 24h2 | Untrusted pointer dereference in Windows Domain Controller allows an unauthorized attacker to deny service over a | 101d ago |
| CVE-2026-50414 | 7.5 | — | — | — | microsoft / windows 11 24h2 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Media allow | 101d ago |
| CVE-2026-50411 | 7.5 | — | — | — | microsoft / windows 10 1607 | Stack-based buffer overflow in Active Directory Federation Services (AD FS) allows an unauthorized attacker to den | 101d ago |
| CVE-2026-50379 | 7.5 | — | — | — | microsoft / windows 11 24h2 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Media allow | 101d ago |
| CVE-2026-50368 | 7.5 | — | — | — | microsoft / windows 10 1607 | Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny servic | 101d ago |
| CVE-2026-50355 | 7.5 | — | — | — | microsoft / windows 10 1607 | Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny servic | 101d ago |
| CVE-2026-50330 | 7.5 | — | — | — | microsoft / windows 10 1607 | Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to elevate privileges over a n | 101d ago |
| CVE-2026-50328 | 7.5 | — | — | — | microsoft / windows 10 1607 | Uncaught exception in Windows Server Update Service allows an unauthorized attacker to perform tampering over a ne | 101d ago |
| CVE-2026-50304 | 7.5 | — | — | — | microsoft / windows 10 1607 | Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny servic | 101d ago |
| CVE-2026-56170 | 7.5 | — | — | — | microsoft / .net | Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny servi | 101d ago |
| CVE-2026-54983 | 7.5 | — | — | — | microsoft / windows 10 1607 | Stack-based buffer overflow in Active Directory Federation Services (AD FS) allows an unauthorized attacker to den | 101d ago |
| CVE-2026-54119 | 7.5 | — | — | — | microsoft / windows 10 1607 | Loop with unreachable exit condition ('infinite loop') in Windows Active Directory allows an unauthorized attacker | 101d ago |
| CVE-2026-50696 | 7.5 | — | — | — | microsoft / windows 10 1809 | Heap-based buffer overflow in Windows Internet Key Exchange (IKE) Protocol allows an unauthorized attacker to deny | 101d ago |
| CVE-2026-50695 | 7.5 | — | — | — | microsoft / windows 10 1607 | Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny servic | 101d ago |
| CVE-2026-50653 | 7.5 | — | — | — | microsoft / .net framework | Loop with unreachable exit condition ('infinite loop') in Azure Active Directory allows an unauthorized attacker t | 101d ago |
| CVE-2026-50652 | 7.5 | — | — | — | microsoft / .net framework | Deserialization of untrusted data in Azure Active Directory allows an unauthorized attacker to deny service over a | 101d ago |
| CVE-2026-50506 | 7.5 | — | — | — | microsoft / asp.net core odata | Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny servi | 101d ago |
| CVE-2026-49788 | 7.5 | — | — | — | microsoft / windows 10 1607 | Allocation of resources without limits or throttling in HTTP/2 allows an unauthorized attacker to deny service ove | 101d ago |
| CVE-2026-49787 | 7.5 | — | — | — | microsoft / windows 10 1607 | Allocation of resources without limits or throttling in Windows HTTP.sys allows an unauthorized attacker to deny s | 101d ago |
| CVE-2026-49181 | 7.5 | — | — | — | microsoft / windows 10 1607 | Integer underflow (wrap or wraparound) in Windows DHCP Client allows an unauthorized attacker to elevate privilege | 101d ago |
| CVE-2026-49171 | 7.5 | — | — | — | microsoft / windows 10 1607 | Use after free in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally. | 101d ago |
| CVE-2026-47296 | 7.5 | — | — | — | microsoft / sql server 2016 | Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an autho | 101d ago |
| CVE-2026-45646 | 7.5 | — | — | — | microsoft / asp.net core odata | Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny servi | 101d ago |
| CVE-2026-40378 | 7.5 | — | — | — | microsoft / windows 10 1607 | Memory allocation with excessive size value in Windows Local Security Authority Subsystem Service (LSASS) allows a | 101d ago |
| CVE-2026-58299 | 7.5 | — | — | — | microsoft / edge chromium | Time-of-check time-of-use (toctou) race condition in Microsoft Edge for Android allows an unauthorized attacker to | 112d ago |
| CVE-2026-58294 | 7.5 | — | — | — | microsoft / edge chromium | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. | 112d ago |
| CVE-2026-58292 | 7.5 | — | — | — | microsoft / edge chromium | Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over | 112d ago |
| CVE-2026-58290 | 7.5 | — | — | — | microsoft / edge chromium | Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unautho | 112d ago |
| CVE-2026-58276 | 7.5 | — | — | — | microsoft / edge chromium | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. | 112d ago |
| CVE-2026-57992 | 7.5 | — | — | — | microsoft / edge chromium | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. | 112d ago |
| CVE-2026-57986 | 7.5 | — | — | — | microsoft / edge chromium | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. | 112d ago |
| CVE-2026-57984 | 7.5 | — | — | — | microsoft / edge chromium | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. | 112d ago |
| CVE-2026-57975 | 7.5 | — | — | — | microsoft / edge chromium | Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unautho | 112d ago |
| CVE-2025-66389 | 7.5 | — | — | — | microsoft / github copilot | GitHub Copilot 1.372.0 allows filesystem access outside of a workspace folder (without user approval) via a file-h | 124d ago |
| CVE-2026-47633 | 7.5 | — | — | — | microsoft / cost management | Exposure of sensitive information to an unauthorized actor in Cost Management Interactive Experiences allows an un | 127d ago |
| CVE-2026-49160 | 7.5 | — | — | — | microsoft / windows 10 1607 | Uncontrolled resource consumption in HTTP/2 allows an unauthorized attacker to deny service over a network. | 136d ago |
| CVE-2026-48563 | 7.5 | — | — | — | microsoft / windows 10 1809 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | 136d ago |
| CVE-2026-47654 | 7.5 | — | — | — | microsoft / windows server 2016 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | 136d ago |
| CVE-2026-45639 | 7.5 | — | — | — | microsoft / remote desktop client | Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network. | 136d ago |
